Vulnerabilidades en Unknown
5492 resultadosAnálisis Vexday
O fornecedor apresenta um portfólio de 4.268 vulnerabilidades, com 144 publicadas nos últimos 90 dias, indicando exposição contínua a riscos. Embora nenhuma esteja sob ataque ativo documentado no KEV, as 124 vulnerabilidades críticas e a predominância de falhas de validação de entrada (CWE-79) representam vetores de exploração significativos que demandam atenção imediata em priorização de patches.
CVE-2023-7236MEDIUMBackup Bolt <= 1.3.0 - Sensitive Data ExposureEPSS 0.5%CVE-2022-4833MEDIUMYourChannel: Everything you want in a YouTube plugin < 1.2.3 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2023-5886—WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRFEPSS 0.5%CVE-2022-2448—reSmush.it Image Optimizer < 0.4.6 - Admin+ Cross-Site ScriptingEPSS 0.5%CVE-2021-24852—MouseWheel Smooth Scroll < 5.7 - Plugin's Setting Update via CSRFEPSS 0.5%CVE-2021-24767—Redirect 404 Error Page to Homepage or Custom Page with Logs < 1.7.9 - Log Deletion via CSRFEPSS 0.5%CVE-2021-24674—Genie WP Favicon <= 0.5.2 - Arbitrary Favicon Change via CSRFEPSS 0.5%CVE-2024-6584CRITICALJetpack Boost < 3.4.7 - Admin+ SSRFEPSS 0.5%CVE-2023-6584HIGHJobSearch WP Job Board < 2.3.4 - Authentication BypassEPSS 0.5%CVE-2021-24766—404 to 301 < 3.0.9 - Logs Deletion via CSRFEPSS 0.5%CVE-2021-24802—Colorful Categories < 2.0.15 - Arbitrary Colors Update via CSRFEPSS 0.5%CVE-2024-8379HIGHCost Calculator Builder < 3.2.29 - Admin+ SQL InjectionEPSS 0.5%CVE-2024-12638HIGHBulk Me Now <= 2.0 - Reflected XSSEPSS 0.5%CVE-2023-3575MEDIUMQuiz And Survey Master < 8.1.11 - Contributor+ Stored XSSEPSS 0.5%CVE-2024-1279MEDIUMPaid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field DisclosureEPSS 0.5%CVE-2023-0873—Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSSEPSS 0.5%CVE-2024-2907MEDIUMAGCA – Custom Dashboard & Login Page < 7.2.2 - Admin+ Stored XSS via Image URLEPSS 0.5%CVE-2022-4831MEDIUMCustom User Profile Fields for User Registration & Member Frontend Profiles with Paid Memberships Pro < 1.8.1 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2021-24470—Yada Wiki < 3.4.1 - Contributor+ Stored XSSEPSS 0.5%CVE-2024-5570MEDIUMSimple Photoswipe <= 0.1 - Subscriber+ Arbitrary Settings UpdateEPSS 0.5%